diff --git a/.github/workflows/provider-ci.yml b/.github/workflows/provider-ci.yml
index f2f5448..1c60745 100644
--- a/.github/workflows/provider-ci.yml
+++ b/.github/workflows/provider-ci.yml
@@ -371,7 +371,7 @@ jobs:
           install: true
 
       - name: Login to Upbound
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
         if: env.UPBOUND_MARKETPLACE_PUSH_ROBOT_USR != ''
         with:
           registry: xpkg.upbound.io
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index 1804a3e..55fa56f 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -131,7 +131,7 @@ jobs:
 
       # we log to DockerHub to avoid rate limiting
       - name: Login To DockerHub
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
         if: env.DOCKER_USR != ''
         with:
           username: ${{ secrets.DOCKER_USR }}